Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File:                     XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier:          BHsCNSUmFccAtNy0N8dK/GFhYmkQ9QN1zscINyMd8qI=
Subject key identifier:   D9:8E:07:C9:EC:A4:0B:33:30:70:8A:79:9D:83:94:FC:90:DB:95:AC
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer:       /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial:       01962F06A81EA0E8B8A6D8CEC3B793262543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number:          13B3
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
                          2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
                          3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: RDDPxH7VIFw2W+VbAPGRmuNoicr8NMMx9aIG1RII+jI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:1e:a0:e8:b8:a6:d8:ce:c3:b7:93:26:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=d98e07c9eca40b3330708a799d8394fc90db95ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d8:01:6e:74:d7:73:47:89:fd:a3:e6:7e:4e:
                    5f:32:13:54:cd:9d:4e:fd:3c:95:60:45:43:9d:4c:
                    74:cc:8d:f3:5f:d5:e4:62:8e:b6:78:eb:e6:74:69:
                    c2:43:d9:2e:60:57:8e:69:15:57:af:77:e7:ae:68:
                    48:8c:b5:f5:e7:5e:69:59:01:5c:95:65:4a:ae:de:
                    24:b7:cb:2a:76:b2:90:f7:6e:4f:2d:ec:da:81:a1:
                    22:cd:5a:2e:08:bb:e6:fb:5d:43:2b:f4:c0:0e:6d:
                    ce:23:cc:39:6c:2c:ca:5a:05:14:e1:e4:30:0e:8f:
                    77:be:f0:e0:12:9e:08:bf:fd:4c:3b:b3:94:87:f9:
                    68:54:8c:5e:76:d6:0f:98:b3:d2:6e:4a:e3:9b:a9:
                    2f:b2:ac:29:0d:bb:77:36:e8:e2:28:0f:a4:48:c6:
                    09:2b:d3:bd:a3:99:bb:0f:f4:41:93:f2:99:f6:ad:
                    de:0c:78:0d:09:23:dc:12:1a:8a:62:6e:2e:28:a7:
                    88:ef:09:c0:fe:2c:15:22:78:1f:31:00:a9:f5:b4:
                    49:5e:77:16:97:ac:9e:76:dc:75:82:e5:70:5d:c2:
                    fd:38:0c:4a:1b:df:92:02:34:ee:12:a2:8f:28:24:
                    7d:ae:1c:99:1a:98:22:4d:ca:65:0d:39:77:6f:ad:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8E:07:C9:EC:A4:0B:33:30:70:8A:79:9D:83:94:FC:90:DB:95:AC
            X509v3 Authority Key Identifier:
                keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:42:b8:63:d3:59:88:3e:d7:6c:24:8b:a8:80:02:c1:8d:
         ca:9e:2e:9d:ac:f1:3b:38:c3:38:11:5a:2e:2a:14:b2:90:47:
         84:50:07:fc:49:a5:8e:3a:47:fa:8f:01:5a:5d:14:79:a8:e4:
         7a:6c:c3:88:83:56:65:7e:d7:08:62:57:1a:1a:a7:89:90:ee:
         f3:82:7f:c3:f7:c6:40:85:1e:b5:e8:2c:a0:6f:e6:83:e2:50:
         d9:bd:e9:18:18:64:d9:c7:e8:d3:bb:49:e1:dc:0a:54:40:40:
         29:0f:a4:e2:ed:3f:36:35:51:c1:e0:54:45:ab:e5:59:5d:3d:
         40:43:c1:0f:98:65:86:fa:e6:3f:c5:96:47:38:07:59:51:5e:
         9a:bb:7f:81:58:6e:3b:a5:02:b0:2a:64:7e:b6:f7:1a:36:96:
         c4:81:23:d5:2a:1d:82:c2:db:bc:7b:30:c7:ec:de:36:20:c6:
         10:d7:54:36:66:17:ce:7c:b2:02:94:65:90:b7:26:32:9f:b2:
         6e:bf:03:73:4c:69:e3:9a:07:86:52:d8:04:73:3e:17:9d:6f:
         46:77:fa:40:c7:84:b8:6b:5f:67:3c:7d:49:5a:42:d3:01:06:
         31:e7:8a:af:7b:da:87:e2:1c:a4:16:60:58:ff:91:80:46:67:
         c4:00:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----